ibm db2 9.7 vulnerabilities and exploits

(subscribe to this query)

4.6

CVSSv2

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 152858.

Ibm Db2 9.7 Ibm Db2 10.5 Ibm Db2 10.1 Ibm Db2 11.1

4.6

CVSSv2

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 152859.

Ibm Db2 9.7 Ibm Db2 10.5 Ibm Db2 10.1 Ibm Db2 11.1

7.2

CVSSv2

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local malicious user to execute arbitrary code on the system as root. IBM X-ForceID: 154069.

Ibm Db2 9.7 Ibm Db2 10.1 Ibm Db2 10.5 Ibm Db2 11.1

2.1

CVSSv2

IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several environment variables that a local attacker could overflow and cause a denial of service. IBM X-Force ID: 139072.

Ibm Db2 10.1 Ibm Db2 11.1 Ibm Db2 10.5 Ibm Db2 9.7

7.2

CVSSv2

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local db2 instance owner to obtain root access by exploiting a symbolic link attack to read/write/corrupt a file that they originally did not have permission to access. IBM X...

Ibm Db2 10.1 Ibm Db2 11.1 Ibm Db2 9.7 Ibm Db2 10.5

7.2

CVSSv2

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to obtain root access by exploiting a symbolic link attack to read/write/corrupt a file that they originally did not have permission to access. IBM X-Force ID: 148...

Ibm Db2 10.1 Ibm Db2 10.5 Ibm Db2 11.1 Ibm Db2 9.7

3.6

CVSSv2

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local unprivileged user to overwrite files on the system which could cause damage to the database. IBM X-Force ID: 149429.

Ibm Db2 9.7 Ibm Db2 10.1 Ibm Db2 10.5 Ibm Db2 11.1

4.6

CVSSv2

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege user full access to the DB2 instance account by loading a malicious shared library. IBM X-Force ID: 1...

Ibm Db2 11.1 Ibm Db2 9.7 Ibm Db2 10.1 Ibm Db2 10.5

5

CVSSv2

IBM DB2 9.1 before FP11, 9.5 before FP9, 9.7 before FP5, and 9.8 before FP4 allows remote malicious users to cause a denial of service (daemon crash) via a crafted Distributed Relational Database Architecture (DRDA) request.

Ibm Db2 9.5 Ibm Db2 9.7 Ibm Db2 9.1 Ibm Db2 9.8

6.4

CVSSv2

The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows malicious users to overwrite "external memory" via unknown vectors, related to a missing "check for...

Ibm Db2 8.2 Ibm Db2 9.1 Ibm Db2 9.5 Ibm Db2 9.7

Get Started

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook